Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3232392e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3232392e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          YN/Gjo4WROZCDQUQgQEEXpXo+pl3am8CIHz1XRmwZ+4=
Subject key identifier:   84:16:53:3D:72:E7:2E:2B:82:60:68:80:EF:AF:5A:EA:D1:FA:7D:91
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       0BBC2F1B2FD930C77E2E720CC2E844E23D2DEC57
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3232392e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:33 +0000
ROA not before:           Tue 04 Feb 2025 18:44:33 +0000
ROA not after:            Tue 03 Feb 2026 18:49:33 +0000
asID:                     262253
IP address blocks:        181.224.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bc:2f:1b:2f:d9:30:c7:7e:2e:72:0c:c2:e8:44:e2:3d:2d:ec:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:33 2025 GMT
            Not After : Feb  3 18:49:33 2026 GMT
        Subject: CN=8416533D72E72E2B82606880EFAF5AEAD1FA7D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:85:4c:b9:58:93:4f:9b:6c:df:7b:15:cf:
                    a1:6c:6e:d5:6d:b9:fa:97:0a:f3:f7:f1:99:2d:e3:
                    56:95:eb:13:56:84:89:45:c2:e2:87:8f:f0:f1:f7:
                    83:bb:65:ae:9e:51:81:7a:97:1a:14:a5:09:f4:69:
                    0f:e8:f5:4c:82:29:94:04:73:24:ca:5f:46:16:43:
                    d4:e4:71:dd:df:68:60:c6:e3:37:15:0f:0d:f4:35:
                    bc:b9:38:47:39:59:04:e3:33:bb:39:8b:30:53:a3:
                    df:d6:80:32:af:a0:5d:2c:6c:85:86:4f:7c:35:67:
                    78:07:1f:60:e9:ee:bb:06:db:52:e9:60:15:ea:64:
                    e7:76:a1:5d:13:ef:c6:24:f0:24:b1:48:7d:8d:26:
                    c0:a6:ca:c1:c0:eb:a7:88:3d:be:3e:c0:b1:be:8c:
                    fd:31:31:5e:70:71:f2:e2:cd:5c:83:56:25:c1:3f:
                    91:be:80:e8:46:1a:f8:69:f0:11:4d:07:b2:6d:9b:
                    ac:e2:fd:3b:49:c1:c2:e0:ee:4a:78:d7:6d:96:63:
                    4b:06:b9:04:25:cd:15:e3:81:26:04:38:0c:dd:82:
                    5a:01:71:b1:b8:9a:ea:8d:75:eb:1f:46:8f:93:ef:
                    ea:e9:78:d5:5c:28:6e:13:d3:3f:3a:d4:06:03:14:
                    40:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:16:53:3D:72:E7:2E:2B:82:60:68:80:EF:AF:5A:EA:D1:FA:7D:91
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3232392e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:7a:8d:09:3c:9b:e0:19:6e:5a:c9:f3:0b:80:3b:f0:50:ec:
         a5:2d:f5:f6:05:02:1a:43:39:69:96:6a:c5:a4:58:b2:54:4a:
         66:6c:dc:72:a6:ce:7e:b9:10:75:82:93:c2:db:05:f4:3c:b1:
         c8:e5:b9:18:fd:4c:6f:9f:d3:7c:fd:90:43:a4:02:bb:c0:6a:
         f0:e6:1f:70:b0:a9:24:ea:fa:35:5c:39:25:36:34:e7:c7:c5:
         4e:58:6d:0e:69:c9:f4:81:22:b3:8d:3f:95:54:ec:ae:65:c8:
         6e:35:49:57:f4:65:f2:1e:02:28:5c:75:27:32:b4:57:56:10:
         fb:6f:5b:5b:50:3c:42:06:4a:64:b1:82:07:58:98:cb:63:2f:
         c1:c6:54:15:19:0d:c6:e6:79:94:c4:d1:4f:c6:6e:e0:22:0c:
         7e:24:ed:9d:60:66:d0:be:f4:56:83:a5:d5:98:42:13:0d:9b:
         ce:3f:8d:50:95:2d:79:e5:e7:17:8e:42:e1:6f:13:55:dd:c6:
         b3:28:88:8f:8d:bb:6f:16:c3:4e:59:72:a5:bf:6b:ff:31:d5:
         18:0c:4b:57:ea:62:53:36:44:4a:2b:d3:6d:85:52:6d:ae:1f:
         ce:53:98:70:10:6c:0b:20:82:58:a7:b3:09:d4:a2:3b:2a:a9:
         4a:56:5f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:04 2025 by rpki-client